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This paper analyzes priority rules, such as those in Part 91.113 of the Federal Aviation 
Regulations. Such rules determine which of two aircraft should maneuver in a given conflict 
scenario. While the rules in 91.113 are well accepted, other concepts of operation for 
NextGen, such as self separation, may allow for different priority rules. A mathematical 
framework is presented that can be used to analyze a general set of priority rules and enables 
proofs of important properties. Specific properties considered in this paper include safety, 
effectiveness, and stability. A set of rules is said to be safe if it ensures that it is never the 
case that both aircraft have priority. They are effective if exactly one aircraft has priority 
in every situation. Finally, a set of rules is called stable if it produces compatible results 
even under small changes to input data. 

I. Introduction 

When the trajectories of two aircraft are in conflict, safe conflict resolution requires the maneuvers of 
the aircraft to be mutually compatible. If both aircraft are flying under Instrument Flight Rules (IFR), 
then the air traffic controller ensures this compatibility. For instance, the controller may direct one aircraft 
to completely resolve the conflict, or, in rare cases, may vector both aircraft simultaneously to form a 
compatible action. In situations where at least one aircraft is flying under Visual Flight Rules (VFR), 
the pilots must engage in a shared decision-making process that ensures safety. This concept is called 
coordination 7 which comes in two types. If the maneuver decisions are communicated between the pilots, 
this coordination is termed explicit , 6 Alternatively, if the decisions are not communicated and yet remain 
safe, then this is called implicit coordination . 6 Each of these types of coordination can be divided into whether 
the action requires one aircraft to maneuver or both aircraft to maneuver. Single aircraft maneuvers are 
desired for efficiency reasons, and multiple aircraft maneuvers are often desired for safety reasons. Air traffic 
management concepts typically prefer single aircraft maneuvers while there is sufficient time to recover from 
any unexpected conditions and demand that both aircraft maneuver when such time is not available. Implicit 
coordination for multiple aircraft maneuvers has been extensively studied by Narkawicz and Munoz. 4 This 
paper presents an analytical framework to examine key safety properties of implicit coordination for single 
aircraft maneuvers. The focus is on deciding which aircraft should maneuver rather than what particular 
maneuver should be implemented. 

Implicit coordinaition for single aircraft maneuvers happens in the airspace today through the right- 
of-way rules in Title 14 of the Code of Federal Regulations (CFR), also known as the Federal Aviation 
Regulations. 2 It has been referred to in the literature as right-of-way rules 2 and priority rules. 7 Behind each 
of these concepts is a procedure whereby one aircraft is designated as having priority , and the other aircraft 
is designated as burdened and is therefore required to perform an avoidance maneuver. 1-8 The current right- 
of-way rules for air traffic are partially 3, captured in 14CFR91.113, for example, “(d) Converging. When 
aircraft of the same category are converging at approximately the same altitude (except head-on, or nearly 
so), the aircraft to the other’s right has the right-of-way.” Although these rules specifically apply in the 
United States, the International Civil Aviation Organization (ICAO) has similar rules in Annex 2. 

The priority rules in 91.113 are very well established. The authors are not aware of any effort, anywhere 
in the world, to modify them. However, developing this analysis framework for priority rules has several 
motivations. First, new airspace concepts such as self-separation' and unmanned aircraft operations may 
require different rules in some circumstances. The acceptance of these concepts will be contingent on the 
priority rules. Because 91.113 is so well-established, great scrutiny will be placed on any new set of priority 
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rules, and the analysis presented in this paper may alleviate concerns. Second, new surveillance technologies, 
such as ADS-B, 5 may allow different priority rules, which provide more efficiency in some circumstances. 
Finally, in a growing number of applications, automation is used to implement priority rules. Computers, by 
their nature, require precise specifications of priority rules. These specifications may lead to safety-critical 
situations that would never arise with humans implementing the rules. For instance, data uncertainty affects 
automated systems in very different ways than it affects humans. 

An important property of the current rules in 91.113 is that the rules that are defined geometrically 
depend only on the current states of the aircraft. An interesting aspect of the approach presented in this 
paper is that such rules do not have to be applied at current states of the aircraft and could instead be 
applied at future states along their planned trajectories. One choice not addressed in this paper is the exact 
point at which the rules should be applied. The rules could be applied at the current states of the two 
aircraft or, if the aircraft are in conflict, the states on their respective flight plans at the last waypoint before 
the conflict. This latter situation is illustrated in Figure 1. Although this is a critical issue for an airspace 
concept, it does not factor into our analysis approach. It is not the purpose of this paper to advocate for one 
state being used instead of another when determining priority. Rather, this paper addresses the problem of 
analyzing priority rules, assuming that particular states have been chosen and both aircraft use these states. 



Figure 1. States at Waypoint Where Conflict is Created 

Priority rules are considered from the perspective of one aircraft, called the ownship. The other aircraft 
is referred to as the intruder. The airspace volume is modeled using a flat-earth projection around a common 
projection point in a 3D rectangular system, i.e. , aircraft positions and velocities are viewed as points and 
vectors in R 3 . The states of the ownship and the intruder can be described by position vectors s 0 ,s; £ R 3 
and velocity vectors v D ,V; £ R 3 , the subscripts of which indicate that the vector belongs to the ownship or 
the intruder (o for ownship and i for intruder). For s £ R 3 , the notation represents the 2D projection 

of s, i.e., the vector in R 2 such that S( Xi!/ ) = ( s x ,s y ). For any vector V 2 in R 2 , refers to the vector 
(v 2 —V 2 }X ), which is a 90-degree clockwise rotation of v 2 . Note that any other nonzero vector w in R 2 is 
parallel to v 2 if w • v^- = 0. Finally, if (3 is any boolean value, equal to either true or false, then — >/3 will 
denote the negation of /?. 

A set of priority rules can be viewed as a function on s c , v„, s^, and v.; that returns true or false. If this 
function returns true then the ownship has priority, and if it returns false then the ownship is burdened. 
The assumption is that both aircraft will use the same priority function. Using this notation we define the 
abstract interface to a priority rule as: 

Definition 1. A priority rule is a function Priority that takes s 0 ,v 0 ,s and v.j as inputs and returns a 
Boolean value, either true or false: 

Priority(s 0 ,v 0 ,Si,Vi) £ {true, false] . 

In section II of this paper, some key properties of priority rules are presented. Section III presents an 
extended discussion of the stability property of priority rules. Section IV examines the priority rules in 
91.113 by first formalizing key elements of the rules and then analyzing their important properties. Finally, 
section V analyzes a different set of priority rules intended for a self-separation application. 
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II. Important Properties of Priority Rules 

This paper considers several important properties of priority rules that should be considered for any new 
set of rules. Some of these properties are enumerated below. 

Property 1 (Safety). It is never the case that both aircraft have priority. 

If both aircraft have priority, then neither aircraft will maneuver, so this is the fundamental safety 
property for priority rules. Formally, a priority rule is said to be safe if it is never the case that under the 
same inputs both aircraft have priority. This property is defined mathematically with the predicate safe?, 
given as follows. 

Definition 2. 

safe?(Priority) = For All s Q , v Q , s,;, v.j R 3 : Priority^ s Q , v Q , s^, V;) =>■ ~^Priority(s.i, v,;, s c , v Q ). 
Property 2 (Effectiveness). Exactly one aircraft has priority. 

A trivial way to satisfy the safety property safe? is to always burden both aircraft, which would defeat 
the purpose of priority rules. To ensure that priority rules are useful, it should be true that, in most cases, 
only one aircraft has priority. This property is mathematically expressed as 

For All s Q , v Q , s i; Vi : [Priority(s Q , v Q , s ;, v*) A -.Priority^, v i; s Q , v G )] V 
[Priority(sj, Vj, s G , v G ) A -.Priority(s 0 , v Q , s*, v*)]. 

The term effective can also be used for only a subset of possible input states. For example, one could say 
that a particular priority rule is effective for all states that are not in a head-on conflict. 

Property 3 (Stability). Even with small changes to the inputs, Priority produces compatible outputs. 

If both aircraft use the same safe and effective priority function and identical input data, they will, by 
definition, provide compatible outputs. Although it is reasonable to assume that both aircraft will use the 
same priority function, with data dropouts and communication errors it is unrealistic to assume that both 
aircraft will use the same input data. The communication necessary to ensure both aircraft use the same 
data is just as complex as explicit coordination. This property ensures that Priority produces compatible 
outputs in the real-world situation of slight data inconsistencies without the complexity equivalent to explicit 
coordination. 

Stability depends on the definition of small changes to the input data. In the definition below, s, v are the 
vectors that represent the aircraft’s perception of its own state at one instant in time and s', v' represent that 
aircraft state’s as perceived by the other aircraft. The values e s ^ xy ,e V}Xy ,e StZ ,e v ^ z are positive real numbers 
defining a small change in the aircraft’s state vectors. The relationship between these two views of the state 
of an aircraft is defined as follows. 

Definition 3. 


p erturb ?(e s , xy , e VlX y , Cs,z > ^v,z , s, v, s , v ) — ||s(x,y) ® (x,y)ll ^ ^s,xy t\ 

ll^(x,y) ^ (x,y)ll ^ ^v,xy 

I s z 5 ^ A e S)2: A 
\v z - v' z \ < e v>z . 

It is important to note that there are properties of priority rules that are not listed above but are still very 
important to consider. For instance, any new set of priority rules should be compared with the current rules 
as outlined in 91.113. Another important property is whether sufficient data is available from surveillance 
system (i.e. , pilot’s eyes or ADS-B) to determine priority by the rule. Finally, a rule should be geometrically 
comprehensive and therefore include no gaps or singularities. This last property is true for any priority 
function, such as those presented above, because if Priority(s G , v Q , s.;, v*) is computable, then every input 
produces some output, so the rule has no gaps. 
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III. Stability of Priority Rules 


The previous section included a qualitative discussion of the notion of stability. This section explores 
stability through several detailed mathematical definitions of stability. Each of the definitions for stability 
given below involve a specific, formal definition of compatible in the stability property. 

The first definition of stability states that if the data used by the intruder to determine priority is a small 
perturbation of the data used by the ownsliip, then it is still the case that exactly one of them has priority 
and the other does not. This definition is essentially the same as property 2 incorporating data error. This 
is formalized in the following mathematical statement. 

Definition 4 (Strong Stability). For all s 0 ,v 0 ,s j,Vj € R 3 , there exists e SiXy ,e VtXy ,e StZ ,e VtZ > 0 such that 
for all s(,X,s',v' G R 3 , 

perturb ?(es,xy > £v,xy> ^s,zi s 0 , v G , s D , v D ) A perturb ?(e s?X y > £v,xyi £s,zi £v,zi Sz, ^i) ■ ? 

[Priori ty(s 0 ,v 0l s*, v*) and ~^Priority( s', v', s' 0 , v(,)] or 

[Priority{ s', v', s' Q , v),) and ^Priority(s Ql v G , s*, v*)] 

The problem with this definition is that it is too strong. Intuitively, if the aircraft are near the point where 
the ownship switches from burdened to priority, then this stability property allows both aircraft to perceive 
the other aircraft as burdened and therefore violate the safety property. Mathematically, this is expressed 
in the following theorem. 

Theorem 1. It is impossible to define priority rules that are safe (property 1), effective (property 2), and 
stable (as represented by definition f). 

A sketch of the proof of this theorem is to observe that Priority must return exactly the same result 
if the inputs are changed a small amount. However, this implies that Priority is a continuous function. If 
false is represented by 0 and true is represented by 1, then the Intermediate Value Theorem states that 
such a function must be constant. A constant true function is unsafe and a constant false function is not 
effective. A priority function that satisfies such a strong stability condition is not useful. 

Clearly, a less restrictive definition of stability is needed. A solution to this problem is to allow cases 
where both aircraft are burdened when the input data is near a point where priority would change from one 
aircraft to another. In this way, the rules are effective as long at the data is away from a priority-swapping 
point. This paper considers two alternate forms of stability, referred to as basic stability and uniform stability. 
Both of them allow for cases where neither aircraft has priority. 

The first alternate definition of stability is referred as basic stability. The only time when safety of the 
priority function Priority becomes a problem is when both aircraft have priority at the same time. One 
way to mitigate this situation is to ensure that when one aircraft has priority, it will continue to have priority 
under slight data perturbations. This is an informal way to define basic stability; a formal mathematical 
definition is given below. 

Definition 5 (Basic Stability). 

basicstability?(Priority) = 

For All s 0 ,v 0 ,Sj,Vj G R 3 : There Exists e s , xy ,e VtXy ,e StZ ,e VtZ > 0 : For All s' 0 , v' Q , s', v' G R 3 : 
perturb ?(es,xy J ^v,xy ; £s,zt ^v,zi S Q , V Q ) A P erturb ?(Cs,xy 5 ^v.xy > c $,zi ^v,zi S,; , Vz , , v^) A 

Priority^ s G , v G , s, ; , v.j) => Pr iori ty(s' Q , v' 0 , s', v'). 

This definition would be trivially satisfied if the function Priority always returned true, which would 
be unsafe. However, if saf e?(Priority) and basic_stability?(Priority) both hold, then for any aircraft 
that has priority, even under slight perturbations of the data, it will still have priority and the other aircraft 
will not. 

As it turns out, there is a close relationship between priority functions that satisfy the predicates safe? 
and basic_stability? and continuous functions on s 0 ,v 0 ,s;,v; that return a real number, which is stated 
in the following theorem. 
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Theorem 2. If f is a continuous function that takes s 0 ,v 0 ,Sj,Vj as inputs and returns a real number and 
also satisfies the property that 

/(S 0 , V 0 ,Sj, Vi) = -f(Si,Vi,S 0 ,V 0 ) 

for all possible inputs s 0 , v 0 , s*, v i; then the priority function Priority j- defined by 

Priority f (s D , v 0 , s.j,v,) = (/( s 0 ,v 0 ,Sj,Vj) >0) 
satisfies basic_stability?(Priority f) and safe?(Priorityj). 

The more interesting property is that the reverse implication is true, a result stated in the next theorem. 

Theorem 3. If basic_stability?(Priority) and safe?(Priority), then there exists a continuous function 
f as defined in Theorem 2. That is, Priority = Priority f and f has the property that /(s D , v D , Sj, v,;) = 
-/(sj, V;,s 0 ,v 0 ) for all inputs. 

The problem with basic stability is that, even though an aircraft with priority continues to have priority 
even under perturbations, the size of these allowed perturbations may be smaller or larger depending on the 
input data. For some inputs, the size of the allowed perturbations can very small. Thus, a notion of stability 
is also needed that, for a fixed bounded range of the input data (e.g., both aircraft are within 100 km of each 
other traveling at no more than 1000 kts), gives a fixed size for perturbations such that all perturbations 
less than that size are allowed. However, an allowed perturbation in this context does not mean that the 
aircraft with priority will continue to have priority, but rather that if one aircraft has priority, then the other 
aircraft will not have priority, even using the perturbed data. This is notion referred to as uniform stability 
in this paper. 

Definition 6 (Uniform Stability). Given bounds on the input data, there exists a certain size for perturba- 
tions such that, if an aircraft has priority, then for any perturbation less than this size, the other aircraft 
will not have priority. This is formalized in the following predicate. 

uniform_stability?(Priority) = 

There Exists M StXy , M VtXy , M SyZ , M„ >2 > 0 : For All s c , v Q , s,;, v* € R 3 : 

There Exists e s ^ xyi e v ^ xy ,e s ^ z ,e v ^ z 0 . Foi All s 0 ,v 0 ,s^,v^ (E R 

l^o(x,y)l| ^ M s ,xy A ||s^( Xj y)|| < AI sxy A || Vo(x,y) || A AI vxy A Hvq^.y) || < AI v , xy A 

\soz\ < M s,z a |s,; z | < M SyZ A \v oz \ < M ViZ A \v iz \ < M V}Z A 

perturb ?(e S}Xy , e v>xy , e s>2 , e„ j2 , s G , v G , s' c , v' 0 ) A perturb?(e S}Xy , e v>xy , e S;2 , e„ j2 , s i; v i; s', v')A 
Priority(s 0 ,v 0 ,Si,v z ) => -^Priori ty(s' i , v', s' 0 , v' c ) 

In this definition, the positive real numbers M SjXy , M V}Xy , M SiZ , M VtZ are bounds on the input data, and 
the parameters e s ,xy^v,xy^s,z^v,z are bounds on the size of the perturbations allowed in the data, which 
will change as the bounds M S}Xy , M VtXy , M s , z ,M VtZ change. That is, as the values of M StXy , M VtXy , M S)2 , M„ j2 
get larger, more possible input states will be required to satisfy the stability property, so the maximum 
perturbation sizes e StXy ,e VtXy ,e StZ ,e v ^ z will often decrease. 

In general, the priority functions that satisfy the predicate basic_stability? are not the same as those 
that satisfy the predicate unit orm_stability?, even when they also satisfy safe?. For instance, the function 
Priority(s c , v Q , vj = (s Q2 > Si z ) satisfies safe? and basic_stability? but not unif orm_stability?. 
The function Priority(s D , v D , s^, v, ; ) = (s Q = Si + (10, 10,0) A v D = v, ; + (100, 100,0)) satisfies safe? and 
unif orm_stability? but not basic_stability?. In Section V, a specific priority function is proposed that 
satisfies all three predicates: safe?, basic_stability?, and unif orm_stability?. Theorem 3 implies that 
this priority function is therefore equal to Priority^ for a continuous function /, which is explicitly defined 
in Section V. 


IV. Analysis of 91.113 Priority Rules 

The right-of-way rules for air traffic given in Title 14 of the Code of Federal Regulations, Part 91. 113, 2 
can be formalized with a priority function as follows. This is a relatively simple formalization of the rules 
in 91.113 and is intended to illustrate the usefulness of the formal framework for analyzing priority rules 
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described in the previous sections. While many of the rules in 91.113 are operational, such as the rule that 
a hot air balloon always has priority over any other category of aircraft, the rules for aircraft of the same 
category flying at the same altitude are based on the states of the aircraft. In particular, rules D, E, and F 
in 91.113 state the following. 

• (D) When aircraft of the same category are converging at approximately the same altitude (except 
head-on, or nearly so), the aircraft to the other’s right has the right-of-way. 

• (E) When aircraft are approaching each other head-on, or nearly so, each pilot of each aircraft shall 
alter course to the right. 

• (F) Each aircraft that is being overtaken has the right-of-way. 

These statements can be formalized as follows. Horizontal convergence between the aircraft is equivalent to 
the following condition. 

Definition 7. horiz-converging?(s 0 ,v 0 ,s i ,'v i ) = {s 0 ( XiV ) - s i( x , y )) ■ {v 0 (x,y) - v i(x,y)) < 0 

If this condition is true, then the aircraft are getting closer at the states represented by s Q , v Q and s,;, v, . 
Whether the intruder is on the right of the ownship can be formalized as: 

Definition 8. on_right?(s 0 ,v 0 )(si, Vj) = (s i(Xiy ) - s o(Xty) ) ■ > 0 

If the aircraft are approaching, either head-on or with one overtaking the other, then the horizontal 
relative position vector between the aircraft, namely s 0 (x,y) — s i(x,y) is parallel to the both v 0 ( x ,y) and 
' v i(x,y)i which are therefore parallel to each other. The condition that distinguishes between the head- 
on case and the overtaking case is whether v 0 (x,y) and Vit x , y ) point in the same direction or in opposite 
directions. Conditions defining the head-on and overtaking cases are given as follows. 

Definition 9. 

he.ad_0Tl7{s o , V G , S,;, V^) = {So(x,y) A:(x,y) ) ' V o(x,y ) 0 A 

(s ?(x,y ) ®o(x,y)) ' W(x,y) 0 A 

(^o(x,y) ®i(x,y)) ' o(x,y ) A 0 A 

(®i(x,y) ®o(x,y)) * ^ i(x,y ) ^ 0 

Definition 10. 

overtaking?^ S 0 , V G , S.j, V,;) = (s o(x,y) ®i(x,y)) ' ^o(x,y) — 0 A 

(®i(x,y) ®o(x,y)) ' W(x,y) 0 A 

(®o(x,y) * ^o(x,y) ^ 0 A 

(Si(x,y) S 0 ( x ,y)) * ^i(x,y) ^ 0 

Note that the two conditions defined above are identical except for the last inequality symbol. The 
condition given by overtaking? states that the ownship is overtaking the intruder. One way to formally 
interpret rules D, E, and F in 91.113 is to say that the ownship has priority precisely when it is to the right 
of, or being overtaken by, the intruder. That is, we could define 

rules_91 . 113_first_try(s 0 , v 0 ,s.j, V,) = on_right?(si, Vj, s D , v c ) V overtaking?(s, ; , Vj, s Q , v Q ). 

This certainly seems like a reasonable interpretation of 91.113. However, there is a problem: 

Theorem 4. The priority function rules-91 . 113-first-try allows cases where both aircraft have priority. 
That is, safe?{rules_91 . 113_first_try) does not hold. 

A specific case where both aircraft have priority when using this priority function is given in Figure 2. 
In this figure, each aircraft is to the right of the other aircraft, and would therefore have priority. It is 
interesting that it is unclear from the language in 91.113 which aircraft would have priority in this case. 

One way to fix this problem is to only give the ownship priority when it is either being overtaken or is 
to the intruder’s right and does not have the intruder to its right. The problem in that case is that it is not 
effective for states where both aircraft are on the other’s right. Thus, there is a large set of states where 
neither aircraft has priority. 
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91.113 D: The aircraft 
to the other's right 
has the right-of-way 


Figure 2. Each Aircraft is On the Other’s Right 


Another way to fix the effectiveness and safety issues inherent in the formalizations of 91.113 provided 
above is to project the states of the aircraft backward in time to when exactly one aircraft is on the other’s 
right and apply the rules at that time. This is possible because in the cases where each aircraft is to the 
other’s right, the intersection point of their trajectories has already occurred. Thus, projecting the states 
backward to a time before the aircraft crossed that intersection point will give a past state at which exactly 
one aircraft was on the other’s right. The rules can then be applied at that state, where exactly one aircraft 
will have priority. It can be seen from standard geometric reasoning that the following function determines 
whether the intruder was on the ownship’s right at this past state. 

Definition 11. was_on_right?(s 0 ,v 0 ,Si,Vi) = ~v 0 ( x ,y) ' ' v i(x,y)' L > 0 

Using this condition instead of the on_right? condition in the formalization of the 91.113 rules gives the 
following priority function. 

rules_91 . 113(s 0 , v 0 , s, ; , Vj) = was_on_right?(si, v i; s c , v Q ) V overtaking?(sj, v i; s 0 , v 0 ). 

It is easy to see that was_on_right?(si, Vi,s 0 ,v 0 ) and was_on_right?(s Q , v 0 , Sj, vf) cannot both hold at the 
same time, which partly implies the following theorem. 

Theorem 5. The priority function rules_91 . 113 never allows cases where both aircraft have priority. That 
is, the condition safe?(rules_91 . 113) holds. 

The function rules_91 . 113 is also effective for all but a few cases. 

Theorem 6. The priority function rules_91 . 113 is effective for inputs states where the aircraft are con- 
verging, not in a head-on conflict, and not on trajectories that are both parallel and non-intersecting. 

Interestingly, the function rules_91.113 does not satisfy the stability condition basic_stability? 
(rules_91 . 113). However, the failure of stability only happens in the overtaking case. That is, if the 
intruder is overtaking the ownship, and hence the ownship has priority, a tiny perturbation of the data can 
produce states where the condition was_on_right? holds, meaning that the intruder is (or was) to the right 
of the ownship, giving the intruder priority in those states. 

V. A Proposed Priority Function 

The previous section showed that the priority rules in Part 91 of the Federal Aviation Regulations can 
indeed be formalized mathematically, and that important properties can be verified about them. This section 
shows that those rules are not the only useful rules that have geometric intuition behind them. Another prior- 
ity function is presented that satisfies the predicates safe?. basic_stability?, and unif orm_stability?, 
and it agrees with the current rules in 91.113 in some important scenarios. This is accomplished in two 
stages: (1) An informal description of the rules, and (2) a precise mathematical definition of the priority 
function. 
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A. An Informal Description of the Rules 


The rules are presented below, in an informal and non-mathematical description of the rules. These rules are 
intended for a self-separation application 7 and may be applied at a much longer time horizon than 91.113. 
For this reason, these rules project the future state of the aircraft just before the encounter. 

• If the two aircraft have different flight modes (ascending/descending/cruising), and neither of the 
aircraft is near a vertical speed that would change this fact, then the aircraft with the lower vertical 
speed has priority. 

• If either aircraft is near a vertical speed where it would change flight modes and either the current or 
the new mode is possibly equal to the mode of the other aircraft, then neither aircraft has priority. 

• Pick a future time just before the encounter, and consider the states of each aircraft at that time. At 
these future states, calculate the projections of each aircraft’s horizontal velocity along the path from 
its position toward the position of the other aircraft. If the lengths (speeds) of these projections are 
close, then neither aircraft has priority. Otherwise, the aircraft whose projection has the smallest speed 
has priority. See Figure 3. 



B. Flight Modes 

As indicated by the informal rules above, the term flight mode in this paper refers to either descending, 
ascending, or cruise. The definition of cruising is that the absolute value of the vertical speed is no greater 
than a fixed value (e.g., 150 ft/minute), treated here as a parameter VCB, which is short for vertical cruise 
buffer. If the state of the ownship aircraft is given by the position and velocity vectors s 0 ,v 0 , then this 
means that the ownship is descending if v oz < —VCB, ascending if v oz > VCB, and cruising if \v oz \ < VCB. 
However, due to perturbations in the data, when computing priority the ownship and intruder may be 
using slightly different data. Thus, if v oz is just slightly greater than —VCB, the ownship may be in cruise 
mode, while the data used by the intruder implies that the vertical speed of the ownship is less than —VCB, 
in which case the intruder thinks that the ownship is descending. If this change has an impact on which 
aircraft has priority, then uniform stability of the rules may be violated. Thus, the concept of being near 
this decision point (cruising/descending) is introduced, and a new parameter VSaf etyBuf f er is introduced 
to define what nearness to this decision point means mathematically. The parameter VSaf etyBuf fer is a 
positive real number (VSaf etyBuff er > 0) such that VSaf etyBuff er < VCB. 

If the ownship’s vertical speed v oz is within VSaf etyBuf fer of —VCB, then it is near the vertical speed 
where it will change between cruising and descending. This motivates the definitions of the following predi- 
cates. 

descending(u oz ) = (v oz < —VCB — VSaf etyBuf fer) 
cruising(i> oz ) = (|u oz | < VCB — VSaf etyBuf fer) 
ascending(i> oz ) = (v oz > VCB + VSaf etyBuff er) 

The number VSaf etyBuf fer basically gives the amount of uncertainty that is allowed in the vertical speed of 
an aircraft. That is, if the vertical speed varies no more than VSaf etyBuf fer, then it is known, for instance, 
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that an aircraft is definitely descending if its vertical speed is less than — VCB — VSafetyBuffer. On the other 
hand, to know with certainty that an aircraft is not descending, its vertical speed should be greater than 
—VCB + VSafetyBuffer. Similar reasoning can be used to determine conditions under which it is known 
that an aircraft is not ascending or not cruising. These conditions are all specified by the following negative 
predicates. 

not_descending(w oz ) = (v oz > — VCB + VSafetyBuffer) 

not_cruising(r oz ) = (v oz > VCB + VSafetyBuffer V v oz < — VCB — VSafetyBuffer) 
not_ascending(r oz ) = (v oz < VCB — VSafetyBuffer) 

If it is known that the ownship and the intruder are currently in different flight modes, for instance that 
the ownship is ascending and the intruder is descending, then the aircraft with the lower vertical speed will 
have priority. This is consistent with rule (G) of part 91.113, which states that when an aircraft is landing, 
it has priority over other aircraft in flight. 

Thus, the vertical rules will apply if it can be determined using the predicates defined above that the 
aircraft have different modes. This motivates the definition of the following predicate, which returns true 
precisely when it is known that the vertical rules will apply. 

vertical_rules_apply(v 0 , V,) = (descending(u oz ) A not_descending(t>j z )) V 

(descending(w,; z ) A not_descending(i> oz )) V 
(cruising(y oz ) A not_cruising(i>j z )) V 
(cruising(iij z ) A not_cruising(u oz )) V 
(ascending(i> oz ) A not_ascending(i>j z )) V 
(ascending(uj z ) A not_ascending(t> oz )) 

Alternatively, if it is known, given uncertainties, that both aircraft have the same mode, then a horizontal 
rule can apply. The following predicate determines when this is the case. 

horizontal_rules_apply(v 0 , = (descending(t> oz ) A descending(uj z )) V 

(cruising(w oz ) A cruising(n iz )) V 
(ascending(r; oz ) A ascending(uj z )) 

It is also possible that neither vertical_rules_apply(v 0 , v,) nor horizontal_rules_apply(v 0 , v^) holds, 
in which case one aircraft has a vertical speed within VSafetyBuffer of either VCB or —VCB, its mode is 
therefore uncertain, and it may or may not have the same mode as the other aircraft. The aircraft in such 
a situation are said to be in a vertical deadband in this paper. 


C. The Mathematical Definition of the Priority Function 

This section uses the flight modes presented above to build a priority function, P. As described in the first 
bullet of section A, the aircraft with the smaller vertical speed has priority, if the vertical rules apply. If the 
horizontal rules apply then more formulas are needed, which are presented in this section. 

If horizontal_rules_apply(v Q , v.j) holds, then a rule is needed to determine priority that is based on 
the horizontal geometry of the situation. The idea is to pick future states of the aircraft that capture the 
geometry of the encounter. At these future states, the projections of each aircraft’s horizontal velocity along 
the path from its position to the position of the other aircraft are calculated. If the lengths (speeds) of these 
projections are close, then neither aircraft has priority. Otherwise, the aircraft whose projection has the 
smallest speed has priority. See Figure 3. 

If s 0 ,v 0 and Si,Vi represent these future states of the aircraft, then, in most cases, the ownship has 
priority precisely when 

velcomp(s Q , v G , Sj, v 4 ) > 0, (1) 

where velcomp is the function defined by 


velcomp(s 0 ,v 0 ,Si, Vj) 


i (x,y) 
i(x,y) II 


^o(x,y) “t ^i(x,y 


)) 


if s< 
if s. 


Si 


= S ? ; 
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Formula (1) is equivalent to the condition that the projection of the intruder’s horizontal velocity, 
toward the ownship has greater length than that of the ownship’s velocity, ~v 0 (x,y)i toward the intruder (see 
Figure 3). In fact, the quantity velcomp(s Q , v D , Sj, Vj) is equal to the projection of the intruder’s horizontal 
velocity minus that of the ownship. 

The future states of the aircraft that will be used in the function velcomp to determine priority can be 
the future states at any future time, assuming that the ownship and intruder agree on the states. The goal 
in picking these future states is that they will be representative of the geometry of the encounter and can be 
used to determine priority through geometric reasoning. 

The time when the aircraft achieve minimum horizontal separation is known as the time of closest 
horizontal approach. 3 The proposed priority rules will apply the function velcomp at a time slightly before 
the time of closest horizontal approach. The states of the aircraft just before this time are geometrically 
representative of the severity of the encounter. The amount of time before the time of closest horizontal 
approach, when these states will be chosen, will be referred to by a parameter tc. It can be set to any 
positive real time. 

If the aircraft are converging and flying at constant velocities with initial positions of s Q and s, ; , then the 
time of closest horizontal approach is equal to (1/|| (y 0 ( x , v ) ~ v i(a:, 3 /))|| 2 )( s o — Sj) • (v D — Vj). If they are not 
converging, it is equal to 0. This motivates the definition of the function tea, which computes the time of 
closest horizontal approach, given by 


tca(s Q , v 0 ,s i; = max(0, 




^o(x,y) ^i(x,y) \ 


when v Q Vj and given by tca(s 0 , v Q , Sj, Vj) = 0 when ’v 0 (x, y ) = w i{x, y )■ It is a t the time tca(s G , v 0 , Sj, Vj) — 
tc when the state of each aircraft will be chosen for determining priority, where s 0 ,v 0 , s j,Vj represent the 
states of the aircraft at time zero (the current time). However, if the horizontal components v 0 ( x ,y) and 
v i(x,y) of the aircraft’s velocities are almost equal, in which case the aircraft are flying with nearly the same 
direction and speed, then the time tca(s 0 , v Q , s,, Vj) is not stable. In this case, neither aircraft should have 
priority, and therefore both should maneuver. 

This motivates the definition of a parameter LRelDB (for “lateral relative deadband”), representing a 
relative speed deadband on the relative horizontal speed between the aircraft. If the horizontal rules apply, 
and if || v 0 ( Xj3/ ) — Vj( Xj3/ )|| < LRelDB, then neither aircraft will have priority. In general, priority when the 
horizontal rules apply will be determined by the following function. 


entrycomp(s Q , v Q , Sj, V;) 


0 if |jv 0 ( Xj y) ^z(x,y)|| — LRelDB 

velcomp(s Q + f*v c , v 0 , Sj + t*v i: Vj) otherwise 


where t* = max(0, tca(s Q , v Q , s,, v.j) — tc). In the second part of this equation, the states of each aircraft 
are projected ahead to the time t* . 

If entrycomp(s Q , v 0 , Sj, Vj) is positive, then it will typically be the case that the ownship has priority. How- 
ever, if it is very closed to zero, then priority may be close to changing between one aircraft and another, so to 
ensure uniform stability, both aircraft should be burdened. This is accomplished through another parameter 
HorizDB, representing a horizontal deadband. Basically, if the absolute value of entrycomp(s OJ v 0 , Sj, Vj) is 
no greater than HorizDB, then the aircraft are in a horizontal deadband, and neither aircraft has priority. 
This motivates the definition of the following lateral priority function. 


lateral_priority(s 0 , v Q , Sj, Vj) = entrycomp(s 0 , v c , s,, v$) > 0 A |entrycomp(s D , v D , Sj, v,)| > HorizDB 

The latter part of this definition (after the and sign, A) implies that neither aircraft has priority in the 
horizontal case when |entrycomp(s 0 , v Q , Sj, Vj)| < HorizDB. 

The function P, defined below, gives a mathematical definition of a proposed priority function. When it is 
known that both aircraft have the same flight mode, priority is determined by the function lateral_priority. 

P(s 0 ,v 0 ,Sj, Vj) = (vertical_rules_apply(v 0 , V,;) A v oz < v iz ) 

V (horizontal_rules_apply(v 0 , Vj) A lateral_priority(s D , v G , Sj, Vj)) 

Below, specific examples are given of priority between aircraft in some common encounter situations. It is 
important to note that if neither the horizontal rules apply nor the vertical rules apply, then this function 
returns false. In such a case, it is unclear, based on perturbations in the data, which rule should apply, so 
neither aircraft has priority. 
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D. Properties of the Proposed Priority Function 

There are several important properties listed in Section II for a priority function. These properties are 
considered here for the priority function P, which is defined above. The following theorem implies that the 
function P never allows a case where both aircraft have priority. 

Theorem 7. The priority function P satisfies safe?(P). 

Even with small changes to the inputs, the priority function P produces compatible outputs: 

Theorem 8. The priority function P satisfies basicstability?{P) and uniformstability?(P). 

As noted in Theorem 1 in Section III, it is impossible for any function to satisfy the conditions safe?, 
stable?, and be effective in the sense that exactly one aircraft is burdened. Thus, while the priority function 
P was constructed with this limitation in mind, the next theorem follows from Theorem 1. 

Theorem 9. The priority function P is not effective. That is, in some cases, neither aircraft has priority. 

One way that neither aircraft has priority is if the horizontal projections of each aircraft’s velocity toward 
the other aircraft, at the states where priority is determined, are equal or nearly equal. In such a case, the 
aircraft are in a horizontal deadband. For such a case, see Figure 4. The function P attempts to minimize 
the number of such cases by reducing the number of places where deadbands are used. 


Projections the Same Length 



Figure 4. A Horizontal Deadband 

The function P can also be compared with the current rules as outlined in 91.113. In particular, it can be 
compared with the geometric rules in 91.113 that are listed at the beginning of Section IV. When aircraft of 
the same category are converging at approximately the same altitude (except head-on, or nearly so), rule D 
in 91.113 gives the priority to the aircraft to the other’s right. The priority function P does not agree with 
this rule. In fact, either aircraft could have priority in this case if the function P is used. 

When aircraft are approaching each other head-on, rule E in 91.113 gives neither aircraft priority. How- 
ever, the function P sometimes allows one aircraft to have priority in this case. When aircraft are approaching 
head on, the slower aircraft usually has priority, except when the speeds of the aircraft are close, in which 
case the function agrees with rule E and neither aircraft has priority. 

When one aircraft is overtaking another, rule F in 91.113 gives priority to the aircraft that is being 
overtaken. In this case, the function P agrees with the current rule, as indicated in Figure 5. 

VI. Concluding Remarks 

This paper analyzes priority rules, such as those in Title 14 of the Code of Federal Regulations, Part 
91.113 2 that determine which of two aircraft on conflicting trajectories should maneuver. The analysis enables 
new concepts of operation for NextGen, such as self-separation, which may involve different priority rules 
than the current, well-accepted rules found in 91.113. A mathematical framework is presented for analyzing 
such rules, with specific properties in mind, such as safety, effectiveness, and stability. A theoretical result 
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Positive Projection 

►»- — 


Negative Projection 



Priority 


Figure 5. An Aircraft Being Overtaken 


is presented that states that it is impossible for a priority function to be safe (never do both aircraft have 
priority), stable (compatible results occur even under slight perturbations to input data), and effective 
(exactly one aircraft has priority in every case). 

This paper analyzes, using the mathematical framework developed, the current right-of-way rules for air 
traffic given in 91.113. The first formalization of these rules, presented in Section IV, did not immediately 
satisfy the key safety property of priority rules, which states that at least one aircraft has priority in every 
situation. That is, it is possible that two aircraft are converging, not in a head-on situation, and that each 
aircraft is on the other’s right. In this case, it is unclear from the rules in 91.113 which aircraft should have 
priority. Another formalization is given for those rules that fixes this problem, by interpreting rule D in 
91.113 in a particular way. Thus, a specific interpretation of the subjective rules in 91.113 is required to 
ensure that there are no cases where both aircraft have priority. 

Finally, a new priority rule function is presented that is both safe and stable, which, by the theorem 
relating these two properties to effectiveness, automatically allows some cases where neither aircraft has 
priority. The development of this function shows that the rules in 91.113 are not the only rules that satisfy 
important operational and safety properties. The proposed priority function essentially works as follows. If 
the two aircraft have different flight modes (ascending/descending/cruising), and neither of the aircraft is 
near a vertical speed that would change this fact, then the aircraft with the lower vertical speed has priority. 
If either aircraft is near a vertical speed where it would change flight modes and either the current or the 
new mode is possibly equal to the mode of the other aircraft, then neither aircraft has priority. Otherwise, 
pick a future time just before the encounter, and consider the states of each aircraft at that time. At these 
future states, calculate the projections of each aircraft’s horizontal velocity along the path from its position 
toward the position of the other aircraft. If the lengths (speeds) of these projections are close, then neither 
aircraft has priority. Otherwise, the aircraft whose projection has the smallest speed has priority. 

The analysis of rules in 91.113 and the proposed priority function show that the mathematical framework 
is general enough to verify an arbitrary set of priority rules. Future work will focus on comparing the 
proposed priority function with 91.113, through simulation, to determine the effects that their differences 
have on airspace operations. 
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